8 stories

Attack Surface Management

Dive into articles on attack surface discovery, reconnaissance strategies, and asset management tools, equipping you to map and secure your digital footprint effectively.

Introducing the httpx dashboard

The most widely used ProjectDiscovery tool, httpx, has been an essential asset in the arsenal of security professionals and researchers. Known for its ability to probe live hosts and capture crucial information. httpx has long been a go-to solution for: * Response data (status, server, location, etc.) * Technology detection * Extra metadata (favicon, hashes, response time, etc.) * Screenshots * Linked domain discovery (extracting domains from CSP, body) * Cloud metadata (ASN, CDN, WAF in

Attack Surface Management Community & Open Source

Introducing Katana: The CLI web crawler from PD

What is Katana? Katana is a command-line interface (CLI) web crawling tool written in Golang. It is designed to crawl websites to gather information and endpoints. One of the defining features of Katana is its ability to use headless browsing to crawl applications. This means that it can crawl single-page applications (SPAs) built using technologies such as JavaScript, Angular, or React. These types of applications are becoming increasingly common, but can be difficult to crawl using traditiona

Attack Surface Management Community & Open Source

Proxify - A portable CLI-based HTTP/Socks proxy written in Golang

In this blog we’ll discuss the basics of proxies, explain what Proxify is and how it can be used. You’ll learn how to: 1. Install and run Proxify 2. Customize proxy output files and addresses 3. Use DSL language to match and/or replace requests/responses from CLI. 4. Use Proxify to log all HTTP requests from Burp Suite or a web browser. 5. Set up Proxify on a VPS to hide the true source of your traffic But first, let's start by defining a proxy and what it can be used for. What is a pr

Attack Surface Management Community & Open Source

Introducing ASNMap: A Golang CLI tool for speedy reconnaissance using ASN data

If you're into hacking, there's a good chance that at least one of ProjectDiscovery's tools has been added to your toolbox over the last couple of years. In all honesty, ProjectDiscovery's tools now make up the majority of my toolbox. For this reason, I get excited when they release something new, and ASNMap is no exception. What are ASNs? An Autonomous System (AS) is one or more IP prefixes, typically run by one network operator, with a clearly defined routing policy. An Autonomous System Nu

Attack Surface Management Community & Open Source

Building Your Own Historical DNS Solution with DNSx

If you’ve been following these blogs, you’ll see that in the last article, we hacked together a basic attack surface monitoring platform using projectdiscovery tools. Using some of those basic building blocks, we’re going to build a basic historical DNS bot that will continuously enumerate domains and then alert us for the existence of new domains. We will also be able to request the results from a flask API. I will be forking the old project as a starting point, so if you haven’t already read

Attack Surface Management Learning & Automation

Hacking Together an ASM Platform Using ProjectDiscovery Tools

Introduction In this article, we’re going to walk through hacking together a simple attack surface monitoring platform by using ProjectDiscovery tools, bash, and flask. We will also be using MongoDB & Redis for scan data and scan queues. This tool was written for the pure purpose of this article, if you would like to contribute to it or fork the repository, I encourage you to! The whole concept of the ProjectDiscovery tool suite is that it is modular, allowing you to tweak it to your heart's c

Attack Surface Management

Introducing Chaos Bug bounty recon data API

We’re proud to announce release of our Chaos Bug bounty recon data API today. This API will allow hackers to get instant data on targets of their choice without running any additional tools at just single hit of request. Goals behind the project Reconnaissance is complex, it requires a proper setup and not everyone is equally good at it. People are skilled differently, some are amazing at looking at Web Attack Surfaces, some prefer to dive deep into logic bugs. Being good at recon requires some

Learning & Automation Attack Surface Management

Reconnaissance - The way it should be

Last year, we were sitting and discussing over coffee how the current reconnaissance techniques we used were outdated and cumbersome. We decided to do some research and improve the overall process. As a result, we set out to create a dataset of DNS Names. The service we created used multiple steps to gather all the assets for a given Domain Name. But there was a major problem with this approach - the system had lesser results than many public alternatives, it wasn’t scalable so the system couldn

Attack Surface Management

Attack Surface Management

Introducing the httpx dashboard

Introducing Katana: The CLI web crawler from PD

Proxify - A portable CLI-based HTTP/Socks proxy written in Golang

Introducing ASNMap: A Golang CLI tool for speedy reconnaissance using ASN data

Building Your Own Historical DNS Solution with DNSx

Hacking Together an ASM Platform Using ProjectDiscovery Tools

Introducing Chaos Bug bounty recon data API

Reconnaissance - The way it should be

Monitor your infrastructure

Talk to sales

Platform

Open Source

Resources

Company